Do we just store the api token retrieved via oauth (during app install/ onboarding) and use that in perpetuity? how long do those last? how would we refresh them if they expire since we are acting from a webhook and don't have a user to redirect to oauth/authorize?

Your answer

Hint: You can notify a user about this post by typing @username

Attachments:
Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.